Take 107 - Ongoing

In some scenarios, when setting or modifying the Email/Phone fields of an administrator, the old values still appear at the bottom pane under "View Sessions" instead of the updated values.

In some scenarios, policy Installation fails with "Operation failed, install/uninstall has been improperly terminated" error. Refer to sk162855.

In a rare scenario, the $CPDIR/tmp/ directory is filled with "CKP_mutex::_opt_CPsuite-RXX_fw1_log__..." files. Refer to sk36754.

High CPU utilization by FWM process when SmartEvent is enabled on the Security Management Server. Refer to sk147563.

In some scenarios, policy fetch fails if name of the Security gateway that tries to fetch this policy is not defined in DNS. Refer to sk150472.

The FWM process may unexpectedly exit when there is no valid license on the Multi-Domain Server.

In some scenarios, DNS Maximum Reply Length IPS protection is not enforced.

• To fully resolve the issue, R80.30 SmartConsole Build 20 (or higher) should be installed.

In some scenarios, user cannot delete a VS object since it is referenced by an automatically generated exception rule. Refer to sk167272.

In some scenarios, the Compliance blade checks the 'Parent rule for Domain's policy' placeholder as if it was a real rule and shows the rule index in the Firewall Best Practices relevant objects.

NEW: Added ability to enable NAT over specific IP address avoiding a source port allocation.

In a rare scenario, the FWK process unexpectedly exits during debug.

In a rare scenario, Security gateway may crash due to NULL pointer reference.

In some scenarios, traffic is dropped with 'up_transaction_notify_clob failed' error in dmesg when Application Control is enabled.

In a rare scenario, Security gateway crashes when proxy is enabled.

In some scenarios, traffic is dropped with "[ERROR]: network_classifier_handle_dag: failed to get uuid of DAG bogus_ip" error in dmesg.

Some Web sites cannot be opened when Content Awareness or Anti-Virus/Anti-Bot is enabled, and Security gateway is configured as proxy.

In a rare scenario, memory usage may rise on Security gateway, when using service with resource with "Optimize URL logging" feature enabled. Refer to sk153052.

In some scenarios, traffic is dropped with "network_classifier_get_dynobjs_for_ip: failed to get UUIDs for IP 0.0.0.0" and "kfunc_ip_ranges_to_dynobj: network_classifier_get_dynobjs_for_ip failed" errors in dmesg when dynamic object is used in access policy.

• Fix is relevant for Gaia 3.10 only.

Log Exporter filtering feature allows to decide which logs will be exported based on values from the various fields on the raw log.

In some scenarios, when running mdsstart, the following error message is shown: "/opt/CPSmartLog-R80.20/bin/smartlogstop: line 65: /opt/CPmds-R80.20/customers//CPSmartLog-R80.20/log/smartlogRun.log: No such file or directory".

In some scenarios, when SAM activity is defined and a Log server receives a high amount of packets, the FWD process on the Log server unexpectedly exits.

In some scenarios, IPS update fails as a result of error in management server installation.

In a rare scenario, Security Gateway may crash during non-compliant HTTP traffic.

In some scenarios, arp table is not synchronized with master MAC address after fail-over.

In some scenarios, installing policy in order to update the cluster topology during high load, causes the members to fail-over. Refer to sk154575.

In a rare scenario, Host destination entries are memory leaking when neighbor entry is in incomplete state. Refer to sk157252.

• Fix is relevant for Gaia 3.10 only.

In some scenarios, packets with IP options are not forwarded across bridge interfaces. Refer to Issue #3 in sk154892.

• Fix is relevant for Gaia 3.10 only.

In a rare scenario, Security gateway may freez / crash when a multicast routing is configured. Refer to sk119299.

• Fix is relevant for Gaia 3.10 only.

In some scenarios, the Security Gateway accepts the traffic, but no ARP request is sent. Refer to sk152093.

• The "fwaccel conns" command has incorrect Help text.
• The "fwaccel conns -n"command returns"invalid mask given" message.

In a rare scenario, Security gateway may crash if cpinfo reads from the /proc/ppk/cpls directory before SecureXL is initialized.

In a rare scenario, Security gateway may freeze when "Drop Templates" or "DOS rate" feature is enabled.

NEW: Improved scalability and resiliency of URL Filtering service.

In some scenarios, OSPFv3 LS updates of the default route are not accepted by the Security gateway for Stub/TSA areas. Refer to sk161472.

In some scenarios, Smart-1 405 and 410 appliances may show high voltage due to incorrect VBat thresholds.

Many "fwldbcast_new: too many hosts : 0" kernel messages appear in /var/log/messages file. Refer to sk153253.

In some scenarios, Gaia restore on Multi-Domain Server fails with error "failed to edit update registry". Refer to sk163312.

NEW: The ARP cache size limit in Clish was increased to 131072 hosts.

In some scenarios, Endpoint Security Clients are in "Disconnected" state after Endpoint Security Server upgrade. Refer to sk161113.

In some scenarios, SmartEndpoint shows "Unknown Error" when trying to open the "User and Computers" Tab "Top Bots" and software deployment by policy reports. Refer to sk151932.

In some scenarios, when searching for a machine in SmartEndpoint and selecting it, a "Server Error" message appears. Refer to sk158432.

In some scenarios, traffic is not working over Site-to-Site VPN after an upgrade.

NEW: Added the option to configure reject routes via vsx_provisioning_tool on Scalable Platforms Appliances. Refer to sk151473.